Security · High impactFan score 64 · Tier A
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
BleepingComputer · By Lawrence Abrams ·
The Brief
- ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs).
- Attackers use compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices.
- The reported campaign has impacted dozens of organizations.
Why it matters
MSPs that run ScreenConnect and the customers they manage may have hostile remote-access clients on their devices, so affected environments need checking.
Who’s affected
- MSPs using ScreenConnect
- Customers of MSPs using ScreenConnect
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. [...]
Timeline
BleepingComputer reports ConnectWise is investigating active ScreenConnect attacks on MSPs
BleepingComputer
Active ScreenConnect attacks breach MSPs, impact dozens of organizations